Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145946.roa
File: AS145946.roa (raw, json)
Hash identifier: 2ls+3NAelxhCRxY6giT1ncekdB9GhNUghAzBft8UUpY=
Subject key identifier: 43:AD:58:34:C6:C7:DC:9E:2A:25:D8:D0:37:CF:FA:6B:85:82:5C:33
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D2E02BF67AABEDA4DBF1B17878ECBB9DBD8795A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145946.roa
Signing time: Tue 26 May 2026 01:12:58 +0000
ROA not before: Tue 26 May 2026 01:07:58 +0000
ROA not after: Tue 25 May 2027 01:12:58 +0000
asID: 145946
IP address blocks: 240a:ace0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2e:02:bf:67:aa:be:da:4d:bf:1b:17:87:8e:cb:b9:db:d8:79:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:58 2026 GMT
Not After : May 25 01:12:58 2027 GMT
Subject: CN=43AD5834C6C7DC9E2A25D8D037CFFA6B85825C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:ae:83:62:78:5e:59:19:c8:56:aa:70:7f:
9d:74:c1:8a:58:70:cc:d8:10:a1:0b:69:98:06:38:
6d:ee:6a:64:5d:1c:f6:e4:10:fc:a8:7d:e2:70:08:
8b:70:15:8e:68:d7:9b:97:e9:55:93:16:fe:d1:b5:
17:85:02:fb:dd:78:6c:a1:0f:7e:61:91:97:f9:f8:
bd:20:f0:79:7d:68:09:70:bb:b5:c3:16:13:e4:97:
5a:40:33:84:8b:59:be:79:c5:91:16:4c:ef:cd:fd:
b6:91:ed:84:4c:11:06:8e:9b:9c:5a:b9:fe:b3:1b:
29:9f:e3:e2:ee:a1:1b:4a:06:a7:41:ff:18:16:ca:
5a:e3:19:f2:e5:e0:60:f3:06:8b:0f:f5:56:5f:a0:
ee:9e:39:53:58:04:5c:ef:ed:a9:25:34:63:c7:29:
f4:63:2f:67:cc:43:77:3c:38:f2:76:ab:43:57:8d:
e1:3e:83:ac:e6:65:77:f0:15:0e:d5:62:cb:f5:7e:
7e:bc:f3:db:d3:9d:8c:dc:cc:13:da:12:70:5f:3c:
14:0d:65:7a:91:33:66:87:ac:f1:33:4b:ab:60:87:
2d:6c:c2:38:da:93:7a:07:3a:72:23:cf:4d:c7:e4:
48:7c:00:eb:06:63:e9:48:79:40:f9:02:8e:6a:14:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:58:34:C6:C7:DC:9E:2A:25:D8:D0:37:CF:FA:6B:85:82:5C:33
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145946.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ace0::/32
Signature Algorithm: sha256WithRSAEncryption
92:68:ac:66:2c:98:e2:17:b8:3c:e4:f7:e6:8b:64:d4:32:47:
9a:5f:0d:7f:3d:ad:fa:27:52:d1:f8:00:98:27:79:8d:75:ad:
1a:d3:fd:59:01:56:33:2c:ec:aa:e2:6a:87:58:85:84:48:f0:
ab:ba:07:9a:42:21:be:d0:9d:21:a0:9f:81:71:a1:9c:47:d3:
03:a8:d1:1f:ce:ea:44:b1:18:d0:4c:a0:66:01:98:04:e7:ee:
8d:b7:c6:9b:b7:de:ef:85:6f:16:f4:07:cb:55:d8:49:ef:47:
b8:d9:65:2b:e8:6d:5f:06:97:20:24:3d:0d:34:a5:f9:4c:56:
af:08:ad:6b:b9:89:9a:c0:e5:0b:e4:55:40:1f:11:69:f1:f7:
9c:11:8a:3b:c3:94:6e:96:31:f6:0a:63:fc:52:64:c5:b7:46:
bf:bc:82:79:14:66:50:a3:5f:b4:74:8f:36:8f:bd:d6:09:d7:
a8:c2:39:8e:52:a4:66:f5:7b:ce:0f:3c:bd:f1:bd:d5:6c:2c:
d3:1b:a6:e8:db:e8:a6:06:03:f6:9f:00:de:e1:b8:3f:cc:72:
64:be:d0:50:38:cd:31:c5:df:e6:40:58:8d:ba:a6:09:6c:cb:
0f:62:6f:2b:8a:f0:f0:62:7f:26:73:31:7b:c8:36:c3:f1:03:
02:c3:54:67
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfS4Cv2eqvtpNvxsXh47LudvYeVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA3NThaFw0yNzA1MjUwMTEyNThaMDMxMTAvBgNV
BAMTKDQzQUQ1ODM0QzZDN0RDOUUyQTI1RDhEMDM3Q0ZGQTZCODU4MjVDMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIeq6DYnheWRnIVqpwf510wYpY
cMzYEKELaZgGOG3uamRdHPbkEPyofeJwCItwFY5o15uX6VWTFv7RtReFAvvdeGyh
D35hkZf5+L0g8Hl9aAlwu7XDFhPkl1pAM4SLWb55xZEWTO/N/baR7YRMEQaOm5xa
uf6zGymf4+LuoRtKBqdB/xgWylrjGfLl4GDzBosP9VZfoO6eOVNYBFzv7aklNGPH
KfRjL2fMQ3c8OPJ2q0NXjeE+g6zmZXfwFQ7VYsv1fn6889vTnYzczBPaEnBfPBQN
ZXqRM2aHrPEzS6tghy1swjjak3oHOnIjz03H5Eh8AOsGY+lIeUD5Ao5qFNRlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUQ61YNMbH3J4qJdjQN8/6a4WCXDMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqs4DANBgkqhkiG9w0BAQsFAAOCAQEAkmis
ZiyY4he4POT35otk1DJHml8Nfz2t+idS0fgAmCd5jXWtGtP9WQFWMyzsquJqh1iF
hEjwq7oHmkIhvtCdIaCfgXGhnEfTA6jRH87qRLEY0EygZgGYBOfujbfGm7fe74Vv
FvQHy1XYSe9HuNllK+htXwaXICQ9DTSl+UxWrwita7mJmsDlC+RVQB8RafH3nBGK
O8OUbpYx9gpj/FJkxbdGv7yCeRRmUKNftHSPNo+91gnXqMI5jlKkZvV7zg88vfG9
1Wws0xum6NvopgYD9p8A3uG4P8xyZL7QUDjNMcXf5kBYjbqmCWzLD2JvK4rw8GJ/
JnMxe8g2w/EDAsNUZw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:15 2026 by rpki-client